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Abstract 



We give a deterministic O(logn)" algorithm for the Shortest Vector Problem (SVP) of a lattice 
t^~- ' under any norm, improving on the previous best deterministic bound of n'^^") for general norms and 

Cn . nearly matching the bound of 2*^^"^ for the standard Euclidean norm established by Micciancio and 

Voulgaris (STOC 2010). Our algorithm can be viewed as a derandomization of the AKS randomized 
rj . sieve algorithm, which can be used to solve SVP for any norm in 2'^*^"-' time with high probability. We 

r ^ ' use the technique of covering a convex body by ellipsoids, as introduced for lattice problems in (Dadush 

.! et al., FOCS 2011). 

fj ' Our main contribution is a deterministic approximation of an M-ellipsoid of any convex body. We 

achieve this via a convex programming formulation of the optimal ellipsoid with the objective function 
being an n-dimensional integral that we show can be approximated deterministically, a technique that 
<^ . appears to be of independent interest. 
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1 Introduction 

The Shortest Vector Problems (SVP) on lattices is a central algorithmic problems in the geometry of num- 
bers, with applications to Integer Programming IILen83ll . factoring polynomials over the rationals IILLL82II . 
cryptanalysis (e.g., IIQdl901 IJS981 INSOll ). and much more. (An n-dimensional lattice L is a discrete ad- 
ditive subgroup of M", and is generated as the set of integer linear combinations of some basis vectors 
bi, . . . ,bk G M", for some k < n.) The SVP is simply: given a lattice L represented by a basis, find a 
nonzero v ^ L such that \\v\\ is minimized, where ||-|| denotes a particular norm on R". 

The fastest known algorithms for solving SVP in general norms, are 2'~'^"'^ time algorithms based on the 
AKS Sieve IIAKSOlllAJOSi These algorithms use an exponential amount of randomness and only guarantee 
the correctness of their outputs with high probability. Improving on this, [DPVl lI gave a 2*^'-") Las Vegas 
algorithm (i.e. only the runtime is random, not the correctness) for general norm SVP which uses only a 
polynomial amount of randomness. In this paper, building on the ideas of HDPVlll . we give a deterministic 
0(log n)" algorithm for general norm SVP, hence completely eliminating the randomness while sustaining 
a moderate slowdown in the running time. The previous best deterministic complexity for general norm 
SVPisn^("). 

We review the ideas behind HDPVllll . For the Euclidean norm (when if is a ball in M"), Micciancio and 
Voulgaris liMVlOl showed how to solve the SVP in time 2'^("\ using a new enumeration technique based 
on using the voronoi cell of a lattice (the set of points in M" closer to the origin than any other lattice point). 
Unfortunately, the direct generalization of their technique to other norms (i.e., using the associated voronoi 
cell of the norm), even for £p norms, seems to break down. 

In fDPVlll, Dadush et al. proposed a different approach that uses the enumeration technique HMVlOl 
and directly reduces SVP in general norms to enumeration in the £2 norm. Their key idea was to use the 
classical M-ellipsoid covering from convex geometry to cover a given convex body K by a small number 
of ellipsoids each of roughly the same volume as K. An M-ellipsoid of a convex body K is an ellipsoid E 
with the following properties: 

1. N{K,E) <20(") 

2. N{E,K) < 2'^(") 

where A^(^, B) = inf{|A| : A C M", ^ C i? + A} is the number of translations of B required to cover 
A. In words, the number of copies of E required to cover K and vice versa are both bounded by a single 
exponential in n. The existence of such an ellipsoid for any convex body was established by Milman IIMil86l . 
We note that an M-ellipsoid can be quite different from the more classical John ellipsoid, e.g. the largest 
ellipsoid contained in K, since its volume can be an n'^^^' factor off from K (e.g., the cube vs the unit ball) 
implying than N{K, E) = n^("). 

The first step in BDPVllI is reduce to general norm SVP under || • \\k and a lattice L to lattice point 
enumeration inside a scaling of K, in particular any scaling s > such that sK r\ L ^ $ and |if n L = 
(which can easily be guessed). Importantly, at this scaling, it is shown that sK never contains more than 
20(") lattice points in any translation. The main idea in MDPVllI is then that enumerating the lattice points 
inside sK reduces to enumerating the lattice points inside the ellipsoids in an M-ellipsoid covering of sK, 
thereby reducing the problem to enumeration in £2 (which can be solved using the techniques in BMVIOII ). 
Given the covering properties satisfied by the M-ellipsoid, we get that the total number of lattice points 
enumerated in this way is at most a 2*^^"^ factor more than the maximum number of lattice points K can 
contain in any translation, and hence 2'^^"). 



Thus a key ingredient in the approach of IIDPVllll to solve SVP under || • ||i^ is finding an M-ellipsoid of 
K. Indeed, the paper BDPVllI gives a polynomial-time randomized algorithm to construct an M-ellipsoid 
with high probability, based on the techniques of Klartag IIKla06l (such an algorithm was implicit in his 
paper). Unfortunately, the algorithm makes essential use of random sampling over convex bodies and seems 
inherently difficult to derandomize. 

In this paper, we give a deterministic algorithm to build an "approximate" M-ellipsoid E for any convex 
body K. While we do not obtain the optimal covering bounds, we will guarantee that N{K, E) = 2*^^") 
and N{E,K) = O(logn)" = 2'^("^°g^°sn^). Moreover, we show that this ellipsoid E can be computed 
O(vTogn)" time. This result and its consequence for the SVP are stated more precisely in the following 
theorems. 

Theorem 1.1. There is deterministic 0(log n)'^-time algorithm that given any convex body K C M", speci- 
fied by a membership oracle, finds an ellipsoid E such that N{K, E) < l^^"^' and N{E, K) < O(logn)". 
The complexity of the algorithm (oracle calls and arithmetic operations) is 0(\/Iogn)". 

Using this theorem, and the techniques from [DPVlli . we obtain the following result: 

Theorem 1.2. Given a lattice L by a basis and a norm \\-\\k specified by a convex body K, the shortest 
vector in L under the norm \\.\\k can be found in time O(logn)"'. 

Applications to other lattice problems (closest vector, integer programming) are described in Section 
[5] These results are based on two main ideas. The first is a convex program inspired by an existential 
approximation to the M-ellipsoid based on a position called the ^-position, given by Pisier ||Pis89ll . The 
second is an algorithm for solving the convex program, where the key hurdle is an efficient deterministic 
approximation of the objective value at any given feasible point. 

In the next section, we describe the ^-position which leads to the approximate M-ellipsoid. Then we 
give our convex programming based algorithm for computing the approximate M-ellipsoid, followed by its 
analysis. Section [5] applies this to the SVP and other problems. 

We conclude this section with a comment on the complexity of computing (approximate) M-ellipsoids 
(and therefore the ^-position). An M-ellipsoid E for a convex body K achieving covering numbers N{K, E), 
N{E, K) gives an N{K, E)N{E, K) to the volume of K. It is well-known that in the oracle model for con- 
vex bodies, any deterministic algorithm that has complexity at most n'^ incurs an approximation factor of 
(cn/a log n)"/^, implying in particular that an algorithm that achieves a 2*^^") approximation must have 
complexity 2^("). Theorem 1 1 . 1 1 readily implies an O(logn)" approximation with 0{^J\ogn)'^ complexity, 
getting close to the lower bound. Fully closing this gap is an interesting open problem. 

2 M-ellipsoids and the ^-position 

As explained above, one useful view of whether an ellipsoid E "approximates" a convex body K well is if 
N{K, E),N{E, K) = 2*^*-"^ A similar view, taken by Pisier, is to find an ellipsoid E with the property that 
vol(i^ n £^) > vol(£;)/2 and vol(i^) not much larger than vol{E). 

This is useful in light of the following elementary bound on covering numbers for centrally symmetric 
bodies (see llMPOOl ). 

Lemma 2.1. Let A,B CI M" be symmetric convex bodies. Then 

Y0l{A) 



N{A,B) <3" 



vol{A n B) 



We are now ready for the ^-position which lets us find an eUipsoid with small covering numbers using 
this perspective. 

Let i^ C M" be a symmetric convex body, and let K* = {x : sup„gj^(x, y) < 1} denote the polar of 
K. Let B2 C M" denote the unit euchdean ball, and S'""^^ = dBJ^ denote the unit sphere. Let ^n{x) = 

{ -^ j e~2 ll^ll be the density of the canonical gaussian measure on W\ We define the expected norm of 
a random Gaussian point as 

1{K) = / \\x\\K'~1n{x)dx. 

The following lemma, see jPis89] , provides an asymptotic estimate of this quantity. 
Lemma 2.2. Let K C M" be a symmetric convex body. Then for 

m = sup{r > : voln-i(r5"~i r\K)> -vol„_i(r5"-i)} 

we have that 1{K) = 6 i^\ Furthermore, vol(mSJ r\K)> ivol(mBJ). 

A theorem of Pisier ||Pis89ll relates the ^-estimate of a body with that of its dual. 
Theorem 2.3. Let K C W^ be a symmetric convex body. Then 

inf l(TK)l(T*K*) < en log n 

TeSL{n) 

where SL(n) is the set ofnxn matrices of determinant 1 and c> is an absolute constant. 

The next theorem, known as the Blashke-Santalo inequality IIBlal81[San49l . gives an upper bound on 
the volume product, a fundamental quantity in convex geometry. 

Theorem 2.4 (Blashke-Santalo). Let K C M" be a symmetric convex body. Then 

vol{K)vol{K*) < vol{B^f 
with equality iff K is an ellipsoid. 

Using the above estimates, we get the following well-known result, whose proof we include for com- 
pleteness. 

Theorem 2.5 (Pisier). Let K C M" be a symmetric convex body. Then there exists an ellipsoid E C M" 
such that 

Yo\{E r\K)> -Yo\{E) and vol(K) < 0(log n)"vol(S n K) 

In addition, we get that 

N{K, E) = 0(log n)" and N{E, K) = -3" 

Proof. Let us first apply a measure preserving hnear transformation T to K such that l{TK)l{T* K*) is 
minimized, and hence by l2.3l we may assume that l{K)l{K*) = 0{n log n). Now using Lemma [Z2l we see 
that 

m = sup{r > : vol(r5^ r\K)> -vol(r5^)} = 9. 



2 ' '" \1{K) 



and that 

m* = sup{r > : Yo\{rB^ n K*) > ^vol{rB^)} = n (-^ 



Hence we get that 



Using Theorem 12 .41 we get that 



mm* = Vi 



logn 



vol(K) < X^^l(^ < 2 ^°^(^^")' 



1 \'' 
m* J 



= 0(mlogn)"vol(Bj) = 0(logn)"vol(m5^) = 0(logn)"vol(mB^ n i^) 

We now see that the elhpsoid E = m.B2 satisfies the claims of the corollary. To derive the additional 
assertions, we simply apply Lemma [ZT] to the volume estimates above. D 

3 Algorithm to compute an ^-type Ellipsoid 

Our algorithm will find an ellipsoid by (approximately) solving the following convex program (CP). 

inf/(^) = / \\Ax\\K7n{x)dx 
subject to nn 

det{A) > 1 



The above program models a tractable formulation of the implicit optimization problem in Theorem [ 
Indeed it is not hard to show that the ^-ellipsoid (understood by its associated linear transformation) alluded 
to in Theorem [231 in fact gives a feasible solution to the above program of good quality. Hence the optimal 
solution to the above program, will be at least as good as the ^-ellipsoid for our purposes. Hence to yield 
our approximate M-ellipsoid, it suffices to solve the above program. 

In the above program, K will be a symmetric convex body presented by a weak membership oracle, 
satisfying ri?2 '■Z K CI RB2. To solve the program, we first round K using the ellipsoid method IIGLS88II 

3 

so that i?2 C iC C ni?2 (note the improvement from na to n is possible since K is centrally symmet- 
ric). Next we use a discrete approximation of space to approximate the ^-estimate at any given A, where 
this approximation remains convex. Next we analyze the properties of the above convex program, show- 
ing that (1) a well sandwiched subset of the feasible region (ratio of inner contained and outer containing 
ball) contains the optimal solution, (2) the objective function is Lipshitz, and (3) the objective value of the 
optimal solution is not too small. From here, we apply the classical reduction from weak membership to 
weak optimization IIGLS881 (which simulates the ellipsoid method), which allows us to compute a (1 + e) 
approximation (multiplicative) of the optimal solution using at most a polynomial number of queries to the 
objective function. 

Our approximation of the ^-estimate is as follows: Let 



1 /log(2(2n + l)) ^ _ 1 



V27f V vr 



C7, = — [-1,1]" andp^=/ -in{x + y)dy. 
2s Jcs 



Define D C M" be set of points from tiie lattice (l/s)Z" that lie in the ball of radius "iy/n around the origin, 
i.e., 



D = Qz") fl {?,V^B^) 



Then 

f{A) = Y,Px\\Ax\\K. 

We conclude the description of the algorithm by bounding the size of D and observing that it can be 
efficiently enumerated. 

First we note that \D\ = 0(-v/Iogn)". Since C^ tiles space with respect to ^Z"' and Cs ^ yJnB^, we 
have that 

vol(Cs) vol(Cs) s~" 

as claimed. 

It is straightforward to compute the set D using 0(A/logn)" time and space. To see this, we observe 
that the graph induced on D by connecting elements x^y G D'xfLx — y E ibi{ei,...,e„}is connected: a 
path to the origin can be constructed from any v E Z) by decreasing each component of u by ^ until it hits 
zero. Hence a breadth-first or depth-first search of this graph starting from the origin allows us to compute 
all of D in the required time. 

4 Analysis 



The analysis is divided into two parts. First, we give an 0(-v/Iogn)" algorithm to compute an approximation 
of the objective value in 13. II on any given input. Second, we show that the optimization problem with the 
approximated objective 13.11 is well-behaved, i.e. that it is convex, that the feasible region can be nicely 
bounded, the objective function is Lipshitz. This will allow us to apply the elhpsoid algorithm to solve the 
problem. 

4.1 Computing the ^-estimate 



In this section, we analyze the deterministic algorithm to approximately compute i{K) in 0(-v/logn)" time. 
Recall that our approach is to approximate the associated integral as a sum over a discrete set. 

We first describe the idea. A reasonable first approach would be to check whether the integrand (i.e. 
1 1 x 1 1 i^) is Lipschitz enough so that reasonably sized discretization may be used to approximate the integral 
£(i^). Indeed, it will be true that |||a;||x — ||y||_ft:| < 0{i{K\)\x — y||2. Given that the mass of the n 
dimensional standard gaussian is concentrated inside of shell of constant width at radius -y/n, this bound on 
the Lipshitz constant would suggest that a discretization D of y^S""^^, such that every point in y/nS'^^^ is 
at distance 0(1) from D, should suffice to estimate 1{K). Though this will indeed be true, any such discrete 
set D must have size 0(-y/n)", i.e. far lager than 0(-v/Iog^)". Taking a closer look however, we observe 
that one only needs such a Lipschitz bound "on average", since all we want is to approximate is the integral. 
This we are able to bound below, using some standard tail bounds and a simple monotonicity inequality 
about expectations. 



To perform the analysis of our algorithm, we will need certain facts about the discrete Gaussian distri- 
bution. Let 

Ps{x) = e~ 



^ ^2 

II s II 



for X G W^, and we write Ps{A) to mean J2xgaPs{^) f^^ ^ ^ ^^- ^^^ ^^ rz-dimensional lattice L C M"^, 
and c E M"^ we define the discrete Gaussian measure on L + c with parameter 5 as 



Ps{L + c) 



for A C L + c. 

In our setting, we will only need the case L = Z". We let U stand for the uniform distribution on 
[-1/2, 1/2]". We now state some useful standard lemmas. See l|Ban95[|MR04|| . 



log(2(f+l)) 



Lemma 4.1. Take s > \/ '"ai^i^-t-^;; ^„j i^f x be distributed as Di+csfar c G M". Then 

/ -. \n 111 ,||2 

Lemma4.2. Let X be drawn from a standard n-dimensional Gaussian N (0,1)"^, i.e., with density ( ^s= ) e^2ll^'il , 



then for t > Iwe have that 

Pr(||X|| >t^/^)<e V *' J^ 

The next lemma is an inequality that we will use in the main proof. 

Lemma 4.3. Let f : M" -^ 'Rbe a convex function. Let U denote the uniform distribution on [—2) 2]" '^'^'^ 
let X denote the n-dimensional Gaussian A^(0, l/\/27r), i.e., with density e^'^H^H . Then we have that 

E[/(X)] > E[/(C/)] 

Proof. We shall prove the statement by induction. Let C = [—\, \\. We start with the base case n = I. The 
density of U here is I[x G C], and the density for X is e~'^^ (this density function is chosen so that the 
density is at most 1 everywhere). 

For our convex function / : M — ;• M, let (/> denote the linear function satisfying </>(— ^) = /(— ^) and 
(j){^) = /(^). By convexity of / we note that f{x) < 4>{x) for x G C and f{x) > 4>{x) for x G M \ C. 
Now we note that 

E[/(X)] - E[f{U)] = [ /(x)(e---" - I[x G C])dx = [ f {x)(e~^^' )dx + / f{x){e-^^" - l)dx 
JR Jr\c Jc 

For j; G M \ C, we have that e~^^ > and f{x) > 4'{x), and hence 

f{x){e-^^")> [ H^){e-^''"). 

Jr\c 

For j; G C, we have that e~'^^ < 1 and that /(x) < 4'{x), and hence 

/(x)(e--^' - 1) > /<A(x)(e--'-l) 
c Jc 



So we see that 



/(a;)(e-^^ )dx + / /(x)(e-^^ - l)dx > / 0(x)(e""^ )dx + / /(a;)(e'^^ - l)dx 
c Jm\c Jc 



0(a;)(e~^^ - /[x G C])(ix = E[(/.(X - [/)] 
=(/.(E[X - ?7]) = 0(0) = 0. 

Here the last equahties follow since is linear and both X and U have mean 0. The base case is thus proven. 
We now assume that the claim is true forn > 1 and prove it forn + 1. Note that X = (Xi, . . . , Xn+i) 
where the XiS are i.i.d. gaussians with density e~'^^ , and that U = {Ui, . . . , Un+i) where the f/jS are i.i.d. 
uniform random variables on C. We first show that 

E[f{Xi, . . . , Xn+l)] > E[f{Xi, ...,Xn, Un+l)] 

To see this, note that 

E[/(Xi,...,X„+i)]= / e--(S"=i-?) [ f{xi,...,xn+i)e'^<+^dxn+i...dxi 

Now by convexity of /, we see that for any xi, . . . ,Xn G K" the function g{y) = /(xi, . . . , a;„, y) is a 
convex function from M to R. Therefore, by the analysis of the base case, we have that 

Jr 

> / £-''(^^=1 "^^^ / f{xi, ..., Xn+l)I[Xn+l G C]dXn+l . . . dxi 

JR" JR 

= E[/(Xi, . . . ,Xn, Un+l)] 

as needed. Next by convexity of /, we get that the function 

g{xi, ...,Xn)= E[/(xi, ...,Xn, Un+l)] 

is also convex. Therefore by the induction hypothesis, we get that 

E[f{Xi, . . . , X„, Un+l)] = E[<7(Xi, . . . , Xn)] > E[g{Ui, ...,[/„)]= E[f{Ui, ..., Un+i)] 
as needed. D 

We are now ready for the main theorem of this section. 



Theorem 4,4, Let s = i ^ i°g(2(2n+i)) ^^^ Cs = ^[-1, 1]". Define DCWas 



/2^ V Tf « 2s I 

D = O-zA f] {Cs + 2^B^) and p^ = j 7n(x + y)dy 
for X G D. Then for any symmetric convex body K C M", we have that 



1 - ^ j 1{K) < 1{K) < n + ^ ) 1{K) 



where 1{K) = Y.xeDPx\\A\K- 



Proof. The proof proceeds as follows. First we note in Claim 1 below that we can restrict attention to a 
ball of radius 2^/n via a tail bound on the standard Gaussian. Then, in Claim 2, we bound the error of the 
discrete approximation computed in terms of the norm of a random point from U (uniform in [—1/2, 1/2]"). 
Finally, using Lemma |431 we can bound this norm by the ^-estimate itself (Claim 3 below). 
Claim 1. 



(1 - e °-^"') / \\x\\Kln{x)dx < / ||x||i^7„(x)da; < / \\x\\K'^n{x)dx 

'D+Cs 



Claim 2. 



'^Px\\x\\k- I \\x\\Kln{x)dx 

~^ Jc+D, 



<-n\\u\\K 

s 



Claim 3. 

E[||C/||;,]<-i=E[||X||;,] 



where X is a standard n-dimensional Gaussian. 
We prove these claims presently. 
Combining Claims (1), (2), and (3), we get the upper bound 



^S^PxWxWk < / ||x||i^7„(a;)(ix + -E[||;7||i^] 



XGD ■'D+C' 



< nuu] + ^ n\\x\\K] = ( 1 + ^ ) n\x\\K], 



and the lower bound 



y]Pa;|k||i^> / \\x\\K7n{x)dx E[||[/||/^] 

XGD Jd+Cs S 



> (1 - e-°-3") E[\\X\\k] - ^ E[||X||^] = h - e-°-3" - ^ j E[||X||^]. 

Since e"''-^" + -^ < ^ for n large enough, we get the claimed result. 
Now we prove the claims. 

Proof of Claim 1: Since the scaled cube Cg tiles space with respect to the lattice ^Z", we get by construc- 
tion of D that 2^/nB2 ^ D + Cg- Since || • \\k is non-negative, we clearly have that 



\\x\\Kln{x)dx < / \\x\\Kln{x)dx < / ||x||x7„(x)dx 

2v^BJ Jd+Cs 



Expressing the integral in polar coordinates, we have 

\x\Kln{x)dx = [ -^= ' 
/2v^BJ 



/ \\x\\Klnix)dx= {^=) / / \\re\\Ke-2^\''-^drde 



1 \" /■ /■2v^ 1 2 

V27r/ Js'"-! Jo 



Thus, 



J^n \\x\\K7n{x) dx J^^_^ J^ \\e\\Ke-^'~\'^drde 

Jq^^ e~^^ r'^dr 



roo —lr2 



> 



_ l + lnC^ 

> 1 _ e ^ ^f^^'" > 1 _ e-O-3- 



Jq°° e 2^ r'^dr 

7„+i(x)dx 



using Lemma l4!2] (i.e.. the standard Gaussian tailbound) with t = 2^/;^^, and noting that n > 1. This 
proves the claim. 

Proof of Claim 2: For y € M", let r{y) denote the closest vector to y in -17^ under the I2 norm. Given 
the structure of Z", a simple computation yields that 

[syi\ [syn 



r{y) 



, . . . , 
s s 



Furthermore, for x G ^Z" we have that r{y) = x iff y G x + C^. Now we see that 

'^Px\\x\\k=^ \\x\\K'yniy)dy = \\r{y)\\Kin{y)dy 

xgd xgd •^^■+Cs JD+Cs 

From here, using the triangle inequality, we get that 

/ \\riy)\\K'yniy)dy < {\\y\\K+\\y-riy)\\Khn{y)dy = \\y\\Kin{y)+ \\y-r{y)\\Kiniy)dy 

Jd+Cs Jd+Cs Jd+Cs Jd+Cs 

Similarly, we also get that 

\\r{y)\\Kin{y)dy> I \\y\\Kin{y) - j \\y - r{y)\\Kin{y)dy 

G, JD+C, JD+C, 



Hence to get the desired upper and lower bounds on ^^gj^ Pz ||2;||x> we need only upper bound the quantity 

Id+Cs \\y ~ ^(y)\\Kln{y)dy. Now we note that 



/ \\y - r{y)\\Kin{y)dy = I \\c\\k ^ in{y)dc 

Ul E ^n{y)dc 



Cl * ^y^sD + C 

, - / \\c\\k > e "V2^s" dc 



Next note that sD = Z" n (Ci + 2^/nsB^). Therefore by Lemma|Owe have that 

<- / ||c||,,(ic=-E[||C/||i^] 



Proof of Claim 3: We wish to show that 



E[\\U\\k] < -^E[\\X\\k] = E[\\^X\\k] 



A simple computation gives that -j^X has density e '^l'^" for x G R". Since || • H^- is a convex function, 



the above inquaUty follows directly from Lemma 1431 The claim thus follows. D 

4.2 Efficiency of solving the convex program 

In what follows we will assume that our symmetric convex body K is well sandwiched, i.e. that B^ ^ K (1 
ni?2 ■ As mentioned previously, this can be achieved by GLS type rounding using the ellipsoid algorithm. 
We recall the functions /, / : M"^" ^ M 

f{A)= \\Ax\\K7nix)dx and /(^) = V] p^||A3;||i^ 

We will consider an approximate version of Program 13. II 

mifiA) = Y,Px\\Ax\\K 
xeD 

subject to (4.1) 

AhO 

det{A) > 1 

The main result of this section is the following: 

Theorem 4.5. Let A denote an optimal solution to Program \4.1\ Then for < e < 1, a matrix A S 
l^nxn satisfying f{A) < (1 + €)f{A) can be computed in deterministic poly(n, In -)0{-\/\og n)" time. 
Furthermore, let A G M"^" be any 2-approximate solution to \4.1\ then for E = -j-^AB2 we have that 

N{E, K) = 2°(") N{K, E) = 0(log n)'' 
Proof. Let A* denote an optimal solution to |3.1[ Then by Theorem 14. 4 1 we have that 

(1 - -)f{A*) < (1 - -)/(i) < RA) < f{A*) < (1 + -)f{A*) (4.2) 

s s s 

where the first inequality follows by optimality of A*, and the third inequality by optimality of A. 

10 



Claim 1: f{A*) = O ( '"'^"^ . Pick a linear transformation T G SL{n) minimizing l{TK)l{T*K). 
From the proof of Lemma [231 for some ci, C2 = 6(1), letting m = ci jr^j^ we have that 



-voi(mr"^B2") = voi(mr"^5^' n K) > ( -^ ) voi(ii:) 

Now 

vol(mT-^5^) = vol(B^)det(r-i)m" = vol(.B^) "^ = vol(S^)m". 



det(T) 



Therefore 



vol(5^)^m > -^^ vol(i^)^ ^ - vol(5J)^ V^ Jogn_ ^ ^^^^^ ^ ^^^^^ ^ ^ / logn 



logn C2 vol(ii:)n \vol(A')-/ 

Using the identity ||x||r_ft: = ||^~"^3;||x we see that 

1{TK)= [ \\x\\TK7n{x)dx= f \\T-'x\\Kln{x) = f{T-') 

Let A = T^^. For a standard gaussian vector X is R", we note that Ag = (y4*A) 2X, where Ag is the unique 
positive definite square root of A'^A, is identically distributed to AX. Therefore f{As) = E[\\AsX\\k] = 
E[\\AX\\k] = f{A) = f{T-^). Since As = {A*A)^ h and det(A,) = | det{A)\ = det{T-^) = 1, we 
have that Ag is feasible for Program [3.1l Since A* is the optimal solution to 13. II we have that 

f{A*)<f{As) = f{T-') = 0' ^°^'' > 



^vol(ii")-/ 
as needed. 

Claim 2: The Pro grams 13.11 and |4~T] are convex. 

By Lemma |46l we know that both / and / are convex over the feasible region. In both programs, the 
feasible region is the set of positive semi-definite matrices of determinant greater than 1, which is clearly 
convex. 

Claim 3: Program 14.11 can be solved to within (1 + e) multiplicative error in deterministic 
poly(n, In ^)0{^/logn)"■ time. 

Given that B2 Q K Q ni?2 , by Lemma 1477] we may constrain convex Pro gram [4. II to the well-bounded 
region R without removing any optimal solutions. Now by Lemma [46] (3) the objective function is 2y/n 
Lipshitz over operator norm (and hence over the Frobenius norm), and by Lemma 14.71 (3) that the ratio of 
min and max value of the objective function over i? is 0{n^). Given all this, we may apply the ellipsoid 
algorithm (see IIGLS881 Theorem 4.3.13 for example) to solve the convex program |4. II to within (1 + e) 
multiplicative error using at most poly(n,lni) evaluations of / and arithmetic operations. Since each 
evaluation of / can be computed in deterministic 0(-v/Iogn)" time, this proves the claim. 
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Claim 4: Let A be a 2-approximation for the program |4.1[ Then the elhpsoid E = -jj^ABqI satisfies 

N{K, E) = 0(log n)" and N{E, K) = 2<^("). 

Let A be as above. By Equation (I4.2I ). Lemma l44l and Claim 1, we have that 



Y0\{K)^ 



By Theorem 14.41 we note that -f-^ = 0(1)-^^^. Hence by Lemma l2!2l there exists c < 1, where c = £7(1), 
such that vol(c£' r\ K) = ivol(cii;). Now note that 

Now since vol(^ C] K) > yo\{cE n K) = ^vol(c£;) = ic"vol(^) and vol(£; n K) > vol{cE n K) = 
f] ( T-^ ) vol(i^), applying the covering estimates of Lemma l2. ll yields the claim. 



logn 

D 
Lemma 4.6. 

1. f,f define norms on W^^"'. 

2. A^A h B^B => f{A) > f{B). 

3. \f{A) - f{B)\, \f{A) - f{B)\ < 2./E\\A- B\\, where \\A - B\\ denote the operator norm of A - B. 

Proof. Let X G M" denote a standard Gaussian random vector. Take A,B^ M"^" and scalars s, t G M. 
Then note that 

f{sA+tB) = E[\\{sA+tB)X\\K] = E[\\sAX+tBX\\K] < E[\s\\\AX\\K+\i\\\BX\\K] = \s\f{A)+\t\f{B) 
where the inequahty above follows since || • \\k defines a norm. Lastly, using the fact that 

1 

— X 2 < \\x\\k < F 2 

n 

for X G M" (since B^ Q K <Z nB^) it is easy to verify that /(^) = 4^ vl = 0"''" and /(^) < oo for all 
A G M"^". Hence / defines a norm on M"^" as claimed. The argument for / is symmetric. 

Now take A, B satisfying the condition of (2). Note that AX is an origin centered gaussian with covari- 
ance matrix E[AX(j4X)*] = E[j4XX*A*] = A'^A. Similarly BX is origin centered with covariance B^B. 
From our assumptions, the matrix C = A^A — B^B ^ 0, hence C has a PSD square root which we denote 
Ca. Now let Y denote standard n-dimensional Gaussian independent from X. Now note that BX + C^Y 
is again a Gaussian vector with covariance B^B + C = A^A. Hence BX + C^Y is identically distributed 
to AX. Therefore we see that 

f{A) = E[\\AX\\k] = E[\\BX + cW\\k] = m[\\BX + c\y\\k]] 

Ji. Y 

> E[\\BX + Cl E[Y]\\k] = E[\\BX\\k] = f{B) 
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where the inequaUty follows by Jensen's inequality and the convexity of || • \\k- 
We now prove (3). Take A,B ^ R"^". By the triangle inequality, we have that 

f{B) - f{A -B)< f{A) < f{B) + /{A - B). 

Therefore \f{B) - f{A)\ < f{A - B). Since / is also a norm, we similarly get that \f{B) - f{A)\ < 
f{A - B). Let \ = \\A- B\\. By definition of the operator norm, we have that {A - BY{A - B) ^ X^In, 
where /„ denote the n x n identity matrix. Therefore by (2), we have that 

f{A -B) = E[||(^ - B)X\\k] < E[||AX||;^] = AE[||X||;^] 



< AE[||X||2] < \^^\\X\\l] = \^ 
as needed. Next by Theorem 14.41 we have that 

f{A -B)< 2f{A - B)< 2\\A - B\\^yn 
as required. D 

Lemma 4.7. Define the set 

R = {A(^ M"^" : A ^ 0, det(^) > 1, ||yl|| < 2n'''} 
where \\A\\ denote the operator norm of A. Then R satisfies the following: 

1. R contains an optimal solution to the proerams \3. l\ and \4.1\ 

2. R satisfies the following sandwiching properties: 

nhn + (ni - 1)5^^'^ C i? C ni/„ + Sn^B^'"'' 

where In is the nxn identity matrix and Bl^^"^ = {A G M"^" : A = A^, \\A\\f < 1}, the set ofn x n 
symmetric matrices of Frobenius norm at most 1. 

3. There is an absolute constant c such that for any A £ R, we have that 

<fiA)J{A)<3n^ 



n 



Proof. Let X £ M" denote a standard n dimensional gaussian vector, and let s ,^ 



log(2(2n+l)) 



We start by showing property (1). Let A be an optimal solution for Program 13. II We wish to show that 

3 

\A\\ < n2. Since ||x||2 > \\x\\k for all x G M", we have that 



/(/„) = E[\\X\\k] < E[||X||2] < ^JE[\\X\\1 = ^ 

Since /„ is feasible for l3.1[ it suffices to show that if ||^|| > 2n^ , we get that f{A) > ^Jn. Let A = ||A||, 
and let v denote an eigenvector of A satisfying Av = Xv and \\v\\ = -. Since K C ni?2 > we have that 

K Q W = {x : \{v, x)\ < 1} (since \\v\\ = -). Therefore 

f{A) = E[\\X\\k] > E[\\AX\\w] = E[\{v,AX)\] 
= XE[\{v,X)\] = X{J^\\v\\) = -.[^ 

\ IT n \ TT 
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Since A is optimal, we get that ^a/§ < y/n =^ A < 2n2 as claimed. We now sliow tlie same for Program 

KH ByEHl /(/„) < (1 + ^)/(/„) < (1 + l)V^- Now if A is an optimal solution togH letting A = \\A\\, 
we have that 

f{A)>{l--)f{A)>{l--)^J^ 
s s n \ IT 

But then as above we have that 

1 + 7 /vF 3 3 

A < f \ -n2 < 2n2 

for n large enough as needed. Therefore R satisfies property (1) as needed. 

3 3 

We now show the containment relationship in (2). Take A = n^ I,^ -\- B where B G (rea — l)i?2 ^". We 
must show that AG R.We recall that \\B\\ < ||-B||i7< V^||-B||. First, note that 

3 3 3 3 

ll^ll < 712 + \\B\\ < n2 +712 — 1 < 2n2 
as needed. Next note that 

inf v^Av = inf v^{n'iln + B)v > inf n^v^v — v^Bv 

DeS"-i ties'"-! i>e5"-i 

3 . i^ II 7^11 

= n2 — sup V Bv > n2 — \\B\\ > 1 

Since A is symmetric, the above shows the A's smallest eigenvalue is at least 1, and hence ^ ^ and 
det(A) > 1 as needed. To show the opposite containment, note that for A £ R,we have that 

\\A - n2lj^\\p < \\A\\f + ||n2l„||p^ < V^||^|| + n^ < 3n^ 

as needed. 

Now we need to show the bounds on f{A) for ^4 G i? to prove property (3). First we remember that 

E[\\AXh]>fiA)>^E[\\AX\\2] 
Hence it suffices to upper and lower bound E[||^X||2]. We see that 



c^E[\\AX\\l] <E[\\AXh] < ^JE[\\AX\\l] 

for an absolute constant < c < 1. Here the first inequality follows by Borell's Lemma and the second by 
Jensen's inequality. Next we have that 



E[pX|||] = ^/E[X^A^AX] = ^/E[tl:ace{A^AXX^^)] = ^/tIace{A^A) = \\A\\f 

Since A £ R, we know that ||^|| < 2n2, and hence ||^||f < 2n^. Combining the above inequalities, this 
yields that f{A) < 2n? as needed. We now prove the lower bound. Since A G i?, we have that det(^) > 1. 
Let Ai denote the i*^ column of A. Now we have that 






4 = 1 
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where the first inequality follows by the arithmetic - geometric mean inequality, and the second follows from 
Hadamard's inequality. Combining the above inequalities, we get that 

f{A)>-Y.[\\AX\\2\>-\\A\\F>^ 
n n \/n 



as needed. The bounds for /(^) follow from the relationship {l-\)f[A) < f{A) < (l + i)/(A) (Theorem 
I44b . D 

5 Application to lattice algorithms 

We now apply our construction of £-type ellipsoids to lattice algorithms. Dadush et al HDPVllll gave algo- 
rithms for SVP in any norm, CVP in any norm and Integer Programming (IP). These algorithms were all 
based on the construction of an M-ellipsoid. Their core result can be stated as follows. For a lattice L and 
convex body K in R", let G{K,L) be the largest number of lattice points contained in any translate of K, 
i.e., 

G(/s:,L) = max|(/s: + x)nL|. (5.1) 

Theorem 5.1. I[DPV11\I Given any convex body K C M" along with an M-ellipsoid E of K and any 
n-dimensional lattice L C M", the set K H L can be computed in deterministic time G{K, L) ■ 2*^^"'. 

They then proceeded to give a randomized construction of an M-ellipsoid. The necessary properties of 
the Af -ellipsoid E are that the covering numbers N{K,E) and N{E,K) are both bounded by 2'^^"^. In 
fact, the result of MDPVllll can be stated more generally as follows. 

Theorem 5.2. Given any convex body K C M" along with an ellipsoid E of K and any n-dimensional 
lattice L C M", the set K n L can be computed in deterministic time G{K, L) ■ N{K, E)N{E, K) ■ 2'^("). 

Furthemore, in BDPVlll . they only require an algorithm which builds an M-ellipsoid when K is centrally 
symmetric. This follows since one can show that an M-ellipsoid E for K—K (which is symmetric) is also an 
M-ellipsoid for K (of slightly worse quality). Hence from Theorem [LT] and the bounds derived on N{K, E) 
and N{E, K), we obtain a simple corollary. 

Corollary 5.3. Given any convex body K C R" and any n-dimensional lattice L C W\ the set K D L can 
be computed in deterministic time G{K, L) ■ 0(log n)". 

This lattice point enumerator is the core of subsequent algorithms for SVP, CVP and IP in HDPVlll . We 
obtain similar conclusions with deterministic algorithms but with an overhead of O(logn)". The precise 
statement for SVP is Theorem 1 1.21 For CVP the statement is as follows. 

Theorem 5.4. There is a deterministic algorithm that, given any well-centered n-dimensional convex body 
K, solves CVP exactly on any n-dimensional lattice L in the semi-norm \\-\\k defined by K, in (2 + ^)'-^(") • 
O(logn)" time and space, provided that the distance from the query point x to L is at most 7 times the 
length of the shortest nonzero vector of L (under ||-||i^j. 

A central motivation for solving SVP in general norms is to improve the complexity of integer pro- 
gramming. The IP algorithm directly uses the SVP algorithm. Moreover, in this case, the final complexity 
bound is already higher than 0(log n)", so we simply get the IP complexity of liDPVllll with a deterministic 
algorithm. 
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Theorem 5.5. There exists a deterministic algorithm that, given a convex body K C M" and an n-dimensional 
lattice L C M", either decides that K D L = 9 or returns a point y & K D L in expected 0{f*{n))" time, 
where f*{n) is the optimal bound for the "flatness theorem." 

The flatness theorem, which we do not describe here, gives a bound on the lattice width of lattice-point- 
free convex bodies. 

6 Conclusion 

The ^-ellipsoid with its covering guarantees is in fact the starting point of Milman and Bourgain's proof of 
the existence of Af -ellipsoids. However, unlike the ^-ellipsoid, we are not aware of any convex programming 
formulation of M-ellipsoids. 

It remains open to give a deterministic 2^^^' algorithm for M-ellipsoids and coverings. This would 
resolve the open problem of a deterministic 2*^(") SVP algorithm in any norm. 

Another open problem is to fully extend the approach suggested in [PPVllll to exact or (1 + e) CVP. At 
the moment, their result only holds for exact CVP when the target point's distance to the lattice is at most a 
constant times the minimum distance of the lattice. In particular, it is open to give a 2^^"^' algorithm for the 
CVP under the L^ norm. 

Acknowledgments. We are deeply grateful to Grigoris Paouris and Chris Peikert for illuminating 
discussions, and to Gilles Pisier for his book on convex bodies. 
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